"Cybersecurity is a team sport. It takes everybody on the field playing," Adegbite said.
Having friends in the right places can also make a difference, according to Chris Rezek, an expert consultant at McKinsey.
"For smaller institutions, make sure you know your local FBI contact [and] which third-party service you're going to call when something happens, so they're not a stranger when you pick up the phone," Rezek said.
Sign up for CIO Asia eNewsletters.